Teclib-edition

Records13All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Teclib-edition records in CISA KEV

No Teclib-edition vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Gestionnaire Libre De Parc Informatique · all components

TI-2019-07550 CVE-2019-10232 · GHSA-hf3r-7c2r-pvhg

MEDIUM 62

Teclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter in /scripts/unlock_tasks.php.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.22372 Published 2019-03-27 No fix listed CWE-89

TI-2019-07549 CVE-2019-10231 · GHSA-rqpr-xfvf-qr4v

MEDIUM 47

Teclib GLPI before 9.4.1.1 is affected by a PHP type juggling vulnerability allowing bypass of authentication.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02498 Published 2019-03-27 No fix listed CWE-843